JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 6192c31c52e9ecb2b747a826634d34bb9d63ffb3 (Received 2017-03-11 00:45:44, script )

URLStatus
http:/ status: (referer=http:/www.ask.com/web?q=puppies)failure: <urlopen error [Errno -3] Temporary failure in name resolution>

xmlhttp NOW CONCAT ELEM ALWAYS STARTtIME DURATION TWEENS RUN NOTIFYwITH RESOLVEwITH OPTS SPECIALeASING EASING REJECTwITH PROMISE PROPS START QUEUE TIMER FX FAIL DONE COMPLETE PROGRESS CAMELcASE CSShOOKS EXPAND UNQUEUED FIRE EMPTY HEIGHT OVERFLOW OVERFLOWx status: (referer=http:/www.ask.com/web?q=puppies)failure: <urlopen error [Errno -2] Name or service not known>

127.0.0.1/undefined

All Malicious or Suspicious Elements of Submission

suspicious: shellcode of length 10001/12271
malicious: shellcode URL=http:
malicious: XOR key [shellcode]: 32
malicious: shellcode [xor] URL=xmlhttp NOW CONCAT ELEM ALWAYS STARTtIME DURATION TWEENS RUN NOTIFYwITH RESOLVEwITH OPTS SPECIALeASING EASING REJECTwITH PROMISE PROPS START QUEUE TIMER FX FAIL DONE COMPLETE PROGRESS CAMELcASE CSShOOKS EXPAND UNQUEUED FIRE EMPTY HEIGHT OVERFLOW OVERFLOWx OVERFLOWy INLINE FLOAT INLINEbLOCKnEEDSlAYOUT INLINE BLOCK ZOOM HIDDEN SHRINKwRAPbLOCKS HIDE SHOW FXSHOW REMOVEdATA CREATEtWEEN END INIT PROTOTYPE OPACITY ISwINDOW DEFAULTvIEW PARENTwINDOW LOCATION NAVIGATOR JqUERY
script malicious
[malicious:10] script
     info: [decodingLevel=0] found JavaScript
     error: undefined function _0xf7bbx30[_0xa3f6[29]]
     error: undefined variable _0xf7bbx30
     error: undefined variable _0xa3f6
     info: DecodedGenericCLSID detected D27CDB6E-AE6D-11cf-96B8-444553540000
     suspicious: shellcode of length 10001/12271
     malicious: shellcode URL=http:
     malicious: XOR key [shellcode]: 32
     malicious: shellcode [xor] URL=xmlhttp NOW CONCAT ELEM ALWAYS STARTtIME DURATION TWEENS RUN NOTIFYwITH RESOLVEwITH OPTS SPECIALeASING EASING REJECTwITH PROMISE PROPS START QUEUE TIMER FX FAIL DONE COMPLETE PROGRESS CAMELcASE CSShOOKS EXPAND UNQUEUED FIRE EMPTY HEIGHT OVERFLOW OVERFLOWx OVERFLOWy INLINE FLOAT INLINEbLOCKnEEDSlAYOUT INLINE BLOCK ZOOM HIDDEN SHRINKwRAPbLOCKS HIDE SHOW FXSHOW REMOVEdATA CREATEtWEEN END INIT PROTOTYPE OPACITY ISwINDOW DEFAULTvIEW PARENTwINDOW LOCATION NAVIGATOR JqUERY
     info: [element] URL=127.0.0.1/undefined
     info: [1] no JavaScript
     info: file: saved script to (33fd317d577b1b539cd4d97cf171a7f0c4b3e421)
     file: 33fd317d577b1b539cd4d97cf171a7f0c4b3e421: 284198 bytes
     file: a5e51f2755fd50dbeca0bb753358c7fbbea0f42e: 13737 bytes
     file: c5dd1a4d3fb567fc34d4d100415d870a671899c3: 10001 bytes

Decoded Files
33fd/317d577b1b539cd4d97cf171a7f0c4b3e421 from script (284198 bytes) download

a5e5/1f2755fd50dbeca0bb753358c7fbbea0f42e from script (13737 bytes) download

c5dd/1a4d3fb567fc34d4d100415d870a671899c3 from script (10001 bytes, 4 hidden) download